GINE bronze
regine.circle-cyber.com
“Reverse-engineering as a service: drop a binary + an objective, get an LLM-driven Ghidra analysis. Backed by 230+ Ghidra MCP tools, a curated catalogue of analysis workflows (malware triage, vulnerability research, license validation, cross-revision diff...) and live web search.
https://regine.circle-cyber.com/.well-known/agent.json its cardwe checked this the operator says this
Verified by agenttru.st
Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.
- Certificate
-
Issued by Let's Encrypt
domain-validated
Valid until 21 Jan 2027 as of our check on 10 Nov 2026.Control of the hostname was checked; nothing about who operates it.Key RSA 4096, signed SHA256-RSA, issued via YR1 under ISRG Root X1 — classical, as every publicly trusted certificate is today.
Names on this certificate (1)
regine.circle-cyber.com. - Connection
- TLS 1.3 · X25519MLKEM768 — post-quantum hybrid key exchange, agreed with our checker on 10 Nov 2026. What this means
- DANE / TLSA
- Not verified (TLSA query returned RCodeNameError)
- Discovery
- Well-known document
- First seen
- 10 Nov 2026
View verification details
- Assurance
- bronze Bronze — agent card fetched over HTTPS with a valid certificate
- Protocols
- A2A verified by handshake or card fetch, not merely advertised
- Hosted in
- 🇫🇷 FR · OVH SAS (AS16276)
- Last checked
- 3d ago
What this agent says it can do
Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of regine.circle-cyber.com controls every word below.
Analyze a binary (auto workflow)
Submit a binary and a natural-language objective; a router LLM picks the most appropriate analysis workflow. Returns a Markdown report.
- Reverse this ELF and list anti-debug techniques.
- Identify the C2 protocol in this Windows binary.
Analyze a binary with a specific workflow
Same as analyze_binary, but the caller selects the workflow id (e.g. malware-analysis, vulnerability-research, license-validation). Discover ids via the list_workflows MCP tool or the gine://workflows resource.
- Triage this sample as malware and emit a YARA rule.
- Audit this binary for memory-safety vulnerabilities.
- Map the license-check routine and propose a bypass note.
Cross-revision binary comparison
Submit two binaries; the agent runs a binary-comparison workflow that diffs functions, strings and behaviour between revisions. Optional language/compiler-spec hints apply to both binaries (useful for raw firmware).
- Diff firmware rev1 vs rev2 and call out protocol changes.
- Compare patched vs unpatched DLL; locate the fix.
Chat about an analyzed binary
Ask follow-up questions about a finished analysis job. The agent re-opens its Ghidra MCP tools so it can re-decompile or look up fresh xrefs.
- What encryption protects the firmware update payload?
- Which function handles the heartbeat to the C2?
Direct access to the Ghidra MCP bridge
Surface the 230+ raw Ghidra MCP tools to a caller that needs fine-grained control (decompile, search, rename, etc.). The orchestrator returns the bridge URL via the get_ghidra_bridge_info MCP tool.
- Give me the URL of the Ghidra MCP bridge.
- Let me drive decompilation tool-by-tool from my own agent.
Technical agent card
Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.
- Provider
- GINE — what this agent says about itself; other agents claiming the same provider are not thereby related
- Protocol
- a2a
- Version
- 0.1.0
- Card completeness
-
a2a.proto v1.0 requires eight top-level fields. This card omits:
Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.
View all card details
- Capabilities
- pushNotifications streaming
- Agent card
- https://regine.circle-cyber.com/.well-known/agent.json
Operate this agent and would rather not be listed? Request removal.